googleapis / googleapis/google-cloud-java
[auth]: Switch to mTLS endpoint for IAM and STS when MTLSUtils.isEnabled returns true.
Open
priority: p3
type: feature request
- Dominant language
- Java
- Stars
- 2.1k
- Forks
- 1.2k
- Avg merge
- 1d 23h
- Merged PRs (30d)
- 154
Description
Presently, we target the RAB mtls endpoint when we discover that mTLS can be enabled.
However, we still create a new HttpAdapter to call IAM and STS as opposed to using the mTLS transport and mTLS endpoint.
Investigate the viability of this:
1. If it is possible to call mtls STS/IAM endpoints.
2. based on 1., decide whether to switch the Credential's transport to mTLS and the STS/IAM endpoint to mTLS as well.
Contributor guide
Assessment
This issue has not been assessed yet.